| GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_5095aa3502de5d23a304096fded0ec7c.json |  185.244.209.62 | 200 OK | 3.8 kB |
URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_5095aa3502de5d23a304096fded0ec7c.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash760aef6021a23b9b00d12d79b667c249 f9020e25d1de99e79badce8270abb9cfb56f863a 19f38f82ab75a3cecf3a85dc8f19f0bf52594d1252d8a3b0f2ebee667598a0fa
GET /genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_5095aa3502de5d23a304096fded0ec7c.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: application/json; charset=utf-8
traceparent: 00-025052a91f8dac61c50e3ca034f8e87b-b307b73b009f9bf4-01
last-modified: Wed, 11 Jun 2025 08:06:50 GMT
etag: W/"760aef6021a23b9b00d12d79b667c249"
cache-control: max-age=3600
content-encoding: gzip
expires: Wed, 11 Jun 2025 09:40:11 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 2226
cache: HIT
x-cached-since: 2025-06-14T20:36:12+00:00
X-Firefox-Spdy: h2
|
|
| POST 1xlite-446241.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json |  178.253.14.230 | 200 OK | 23 B |
URL POST 1xlite-446241.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json IP178.253.14.230:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-446241.top FingerprintE4:92:BE:BA:35:7C:95:77:03:ED:E9:CD:D0:F5:4B:0A:C0:31:E8:76 ValidityMon, 19 May 2025 05:20:46 GMT - Sun, 17 Aug 2025 05:20:45 GMT
Hash13608bcb06c287b13612db9177f2c302 4a69feaf11b27cc10b5c52caf5d69197a8c7d668 e34a970353596dcecde86e66f2b6686efdf26919a715686a66b6b48389c321fe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1
Host: 1xlite-446241.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/en/block
Content-Type: application/json
X-Lang: en
X-Uuid: c9d6da4c-b85c-4425-8bfa-f03e4d881e7d
Content-Length: 48
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0O5mhN5exw5fKXA8GCAg==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: application/json
content-length: 23
x-dt: 1258
x-time-ng: 0.000
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.008, wf-uht;dur=0.008
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/625e1f2832090ba0fc7373dedf6388bd.json | 185.244.209.62 | 200 OK | 328 B |
URL GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/625e1f2832090ba0fc7373dedf6388bd.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash4347fc050ebe622e30a7bf78a213b5a0 c05b3b571980b01ff9f07e6adc1c29c58be70bd1 ed1b1193a248bf273141c31b7f74dd1224416b3757e5a71f2e7d579c50d65d57
GET /genfiles/cms/1-1258/desktop/media_asset/625e1f2832090ba0fc7373dedf6388bd.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:19 GMT
content-type: application/json
content-length: 328
traceparent: 00-21e7acd01dc916c930bcc0a62e959e3b-fdab8f7edd34e9e1-01
last-modified: Thu, 27 Feb 2025 10:57:19 GMT
etag: "4347fc050ebe622e30a7bf78a213b5a0"
expires: Thu, 05 Jun 2025 08:40:15 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: REVALIDATED
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| POST 1xlite-446241.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json | 178.253.14.230 | 200 OK | 2 B |
URL POST 1xlite-446241.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json IP178.253.14.230:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-446241.top FingerprintE4:92:BE:BA:35:7C:95:77:03:ED:E9:CD:D0:F5:4B:0A:C0:31:E8:76 ValidityMon, 19 May 2025 05:20:46 GMT - Sun, 17 Aug 2025 05:20:45 GMT
Hashd751713988987e9331980363e24189ce 97d170e1550eee4afc0af065b78cda302a97674c 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1
Host: 1xlite-446241.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/en/block
Content-Type: application/json
X-Lang: en
X-Uuid: c9d6da4c-b85c-4425-8bfa-f03e4d881e7d
Content-Length: 19
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0O5mhN5exw5fKXA8GCAg==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1280; che_g=c9365aa6-e939-e18f-3a7d-8424be5b84f2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:19 GMT
content-type: application/json
content-length: 2
x-dt: 1258
x-time-ng: 0.000
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.006, wf-uht;dur=0.008
X-Firefox-Spdy: h2
|
|
| GET 1xlite-446241.top/main-static/e6b170ce/check-ob.js | 178.253.14.230 | 200 OK | 219 B |
URL GET 1xlite-446241.top/main-static/e6b170ce/check-ob.js IP178.253.14.230:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-446241.top FingerprintE4:92:BE:BA:35:7C:95:77:03:ED:E9:CD:D0:F5:4B:0A:C0:31:E8:76 ValidityMon, 19 May 2025 05:20:46 GMT - Sun, 17 Aug 2025 05:20:45 GMT
File typeJavaScript source, ASCII text Hashc065700c9c8c493403359e1f2baa10d9 4630fe729e70bdf63fa7ba6c84ec277fd1f51030 1e61f0c82ae82ffcf503fcd4b4c8ae27b32c11e19b882d5d13f3c44364c893f4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /main-static/e6b170ce/check-ob.js HTTP/1.1
Host: 1xlite-446241.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/en/block
Cookie: platform_type=desktop; auid=sv0O5mhN5exw5fKXA8GCAg==; lng=en; cookies_agree_type=3; tzo=2; is12h=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:16 GMT
content-type: text/javascript; charset=utf-8
content-length: 219
last-modified: Thu, 12 Jun 2025 08:53:28 GMT
etag: "c065700c9c8c493403359e1f2baa10d9"
x-amz-meta-mtime: 1749718407.557455909
expires: Sun, 15 Jun 2025 21:13:16 GMT
cache-control: max-age=86400
x-time-ng: 0.000
accept-ranges: bytes
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.009
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/main-static/e6b170ce/desktop/default/css/10b13e89.css | 185.244.209.62 | 200 OK | 56 kB |
URL GET v3.traincdn.com/main-static/e6b170ce/desktop/default/css/10b13e89.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with very long lines (56327), with no line terminators Hash8ab3f2e974dc6d8cd0395696a2dcbe90 2da436113e43d10ff6b31ceb0e2996347a6531a0 3e82938fc0aae7fdd6b259023c159e593ae314acf3b691dc30f9693d52148bd8
GET /main-static/e6b170ce/desktop/default/css/10b13e89.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:17 GMT
content-type: text/css; charset=utf-8
traceparent: 00-e4b98ea355deabbfa8cb1bc3f253ca73-0b85c0f123532d20-01
last-modified: Thu, 12 Jun 2025 08:51:05 GMT
etag: W/"8ab3f2e974dc6d8cd0395696a2dcbe90"
x-amz-meta-mtime: 1749718261.852055161
content-encoding: gzip
expires: Fri, 13 Jun 2025 09:02:33 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 43371
cache: HIT
x-cached-since: 2025-06-14T09:10:26+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_XYWIEKOD.js | 185.244.209.62 | 200 OK | 865 B |
URL GET v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_XYWIEKOD.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (840) Hash0af3fe0c072a5bb3b6c731767187982f 55db5afb57265dc92fd121fe9ae565ffb2f53b2c 655bbe85da91e863401c6f96e24b41f5c2fe51a4245cecc2deb2b8c9600fef30
GET /sys-static/shared-assets/__shared_fast_deep_equal_XYWIEKOD.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: text/javascript; charset=utf-8
content-length: 865
traceparent: 00-1e06e117fb0a475a3c4a073af064fc94-d0a0d34d9f2d67a3-01
last-modified: Fri, 13 Jun 2025 12:16:02 GMT
etag: "0af3fe0c072a5bb3b6c731767187982f"
x-amz-meta-mtime: 1749816157.500422946
expires: Sun, 15 Jun 2025 08:08:58 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 46649
cache: HIT
x-cached-since: 2025-06-14T08:15:49+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/25c3998383.js | 185.244.209.62 | 200 OK | 864 B |
URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/25c3998383.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (863) Hashcd67cb70163467a629fdd571c7fe7cab 162418c6e156aa935146915e45ea0e580955086f 1ff4f85984794159c0f77930c3495d057c317fd85a1cd9f1ac117bb45b40f115
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/25c3998383.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:19 GMT
content-type: text/javascript; charset=utf-8
content-length: 864
traceparent: 00-5cdcc099172e063c49990889b3498ff4-d7d4ede687c18d7d-01
last-modified: Wed, 11 Jun 2025 10:23:53 GMT
etag: "cd67cb70163467a629fdd571c7fe7cab"
x-amz-meta-mtime: 1749637066.108324997
expires: Fri, 13 Jun 2025 02:43:19 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 66514
cache: HIT
x-cached-since: 2025-06-14T02:44:45+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| | 178.253.14.230 | 302 Found | 263 kB |
IP178.253.14.230:443 ASN#202492 Silverhill Group Holding Ltd
CertificateIssuerLet's Encrypt Subject1xlite-446241.top FingerprintE4:92:BE:BA:35:7C:95:77:03:ED:E9:CD:D0:F5:4B:0A:C0:31:E8:76 ValidityMon, 19 May 2025 05:20:46 GMT - Sun, 17 Aug 2025 05:20:45 GMT
Size263 kB (262582 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /en HTTP/1.1
Host: 1xlite-446241.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0O5mhN5exw5fKXA8GCAg==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sat, 14 Jun 2025 21:13:16 GMT
location: https://1xlite-446241.top/en/block
server-timing: dt_total;dur=0.004, total;dur=234;desc="Nuxt Server Time", wf-uht;dur=0.243
set-cookie: gw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned
lng=en; Path=/
cookies_agree_type=3; Path=/
tzo=2; Path=/
is12h=0; Path=/
x-dt: 1258
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| POST 1xlite-446241.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json | 178.253.14.230 | 200 OK | 2 B |
URL POST 1xlite-446241.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json IP178.253.14.230:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-446241.top FingerprintE4:92:BE:BA:35:7C:95:77:03:ED:E9:CD:D0:F5:4B:0A:C0:31:E8:76 ValidityMon, 19 May 2025 05:20:46 GMT - Sun, 17 Aug 2025 05:20:45 GMT
Hashd751713988987e9331980363e24189ce 97d170e1550eee4afc0af065b78cda302a97674c 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1
Host: 1xlite-446241.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/en/block
Content-Type: application/json
X-Lang: en
X-Uuid: c9d6da4c-b85c-4425-8bfa-f03e4d881e7d
Content-Length: 19
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0O5mhN5exw5fKXA8GCAg==; lng=en; cookies_agree_type=3; tzo=2; is12h=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: application/json
content-length: 2
x-dt: 1258
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.091, wf-uht;dur=0.009
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 | 185.244.209.62 | 200 OK | 64 kB |
URL GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 63748, version 1.0 Hash6887b6f24414dbc612dbf42ccdc76b70 8068d3abfbc6cbf35b55919da45b1f4d2d136238 fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:17 GMT
content-type: font/woff2
content-length: 63748
traceparent: 00-1c7f8c551952afab109241b8dcf9564b-85bad4c1003597d0-01
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "6887b6f24414dbc612dbf42ccdc76b70"
expires: Thu, 16 Jan 2025 10:32:14 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 904
cache: HIT
x-cached-since: 2025-06-14T20:58:13+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json | 185.244.209.62 | 200 OK | 765 B |
URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash00f980f23f1b4c1ccee99ed49e0a8feb 4cb07094de9bffff1bf81d94446280b91013b660 bb3be3377fbb8e66a4b5a8a3866dfd865a37cb4a96482ab2f439981e03b57cea
GET /genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: application/json; charset=utf-8
content-length: 765
traceparent: 00-b79a5779e9bda8e9caabf4a18d894fe7-3a22e87389bd0c19-01
last-modified: Wed, 11 Oct 2023 12:52:53 GMT
etag: "00f980f23f1b4c1ccee99ed49e0a8feb"
cache-control: max-age=3600
expires: Thu, 16 Jan 2025 10:53:47 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1153
cache: HIT
x-cached-since: 2025-06-14T20:54:05+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-static/shared-assets/__shared_chunk_7HDOEZTP.js | 185.244.209.62 | 200 OK | 1.2 kB |
URL GET v3.traincdn.com/sys-static/shared-assets/__shared_chunk_7HDOEZTP.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1193) Hash7e76c08e7f16815131a5f13a10c1efba 5f800877b78a0713157fe119bc1a2d9a260f72e1 c6f29a0c7c3ed884ccffd7a529fd2fc599e2da1f31af658146f0e36a3f4c00dc
GET /sys-static/shared-assets/__shared_chunk_7HDOEZTP.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-02a55c47ac4d48306941b0b764947128-d75176fb0074d7c7-01
last-modified: Fri, 13 Jun 2025 12:16:02 GMT
etag: W/"7e76c08e7f16815131a5f13a10c1efba"
x-amz-meta-mtime: 1749816157.500422946
content-encoding: gzip
expires: Sun, 15 Jun 2025 08:08:57 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 46648
cache: HIT
x-cached-since: 2025-06-14T08:15:50+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/8c7a284a3d3af225cbabdbe8d4765503.json | 185.244.209.62 | 200 OK | 2.9 kB |
URL GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/8c7a284a3d3af225cbabdbe8d4765503.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hashf9867cd5bf362d5d518027321410c262 c8152b1f17123f07b027c8ab359062dc5f7c1456 baa9a4f415e8e8b95c2269ac32d20c6850852d9973e47937440e2761a6d8ee65
GET /genfiles/cms/1-1258/desktop/media_asset/8c7a284a3d3af225cbabdbe8d4765503.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:19 GMT
content-type: application/json
traceparent: 00-0929dd74cfab3776069fba1c6978bdbf-7bb8ce8600ca0a1e-01
last-modified: Thu, 05 Jun 2025 12:31:11 GMT
etag: W/"f9867cd5bf362d5d518027321410c262"
content-encoding: gzip
expires: Wed, 11 Jun 2025 10:06:31 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: REVALIDATED
X-Firefox-Spdy: h2
|
|
| GET 1xlite-446241.top/en/block | 178.253.14.230 | 203 Non Authoritative | 263 kB |
URL User Request GET 1xlite-446241.top/en/block IP178.253.14.230:443 ASN#202492 Silverhill Group Holding Ltd
CertificateIssuerLet's Encrypt Subject1xlite-446241.top FingerprintE4:92:BE:BA:35:7C:95:77:03:ED:E9:CD:D0:F5:4B:0A:C0:31:E8:76 ValidityMon, 19 May 2025 05:20:46 GMT - Sun, 17 Aug 2025 05:20:45 GMT
File typeHTML document, ASCII text, with very long lines (53869) Size263 kB (262582 bytes) Hashd0928bf2448f539da792d6912f3e74c3 1972b488ca1a9eb8b4250c5ccab7c8c8db8b00b9 a930232cefe4db4025567b0b6f89fdaf12ebf2910e4412c84ff1c2163c3b93b1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /en/block HTTP/1.1
Host: 1xlite-446241.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0O5mhN5exw5fKXA8GCAg==; lng=en; cookies_agree_type=3; tzo=2; is12h=0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 203 Non Authoritative
server: nginx
date: Sat, 14 Jun 2025 21:13:16 GMT
content-type: text/html; charset=utf-8
content-length: 262582
accept-ranges: none
server-timing: dt_total;dur=0.003, total;dur=160;desc="Nuxt Server Time"
set-cookie: gw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned
lng=en; Path=/
cookies_agree_type=3; Path=/
tzo=2; Path=/
is12h=0; Path=/
x-dt: 1258
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_css_6142be.css | 185.244.209.62 | 200 OK | 4.2 kB |
URL GET v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_css_6142be.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with very long lines (3743) Hash171e9a7475c71887ff37d52e24605a97 e48eb9f3fa6407ba31f405ed2320f18889e5f388 6142be1be0200ed42b10d14b9f5ffa06c4fcf9d2445d15c64d5bc16eb21a8fe5
GET /sys-static/shared-assets/Desktop/__shared_css_6142be.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:17 GMT
content-type: text/css; charset=utf-8
traceparent: 00-6f6e099cb18d5b498fc9069d8b3d6830-f47a36a0f89ac74e-01
last-modified: Fri, 13 Jun 2025 12:16:04 GMT
etag: W/"171e9a7475c71887ff37d52e24605a97"
x-amz-meta-mtime: 1749816157.492422864
content-encoding: gzip
expires: Sun, 15 Jun 2025 10:56:05 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 36459
cache: HIT
x-cached-since: 2025-06-14T11:05:38+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_7f838d5fc33e22c32ba4cd5c4587c0c2.json | 185.244.209.62 | 200 OK | 9.6 kB |
URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_7f838d5fc33e22c32ba4cd5c4587c0c2.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash8fe51848490ee8a9400ec1170c2ab5a0 5f1adbe64d36ec676f0ee47541af94ee719af580 1c4ae5753f59ce6fc8d72baf4f84008f7b2aa61de1fb9363ffa9517ba64192f2
GET /genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_7f838d5fc33e22c32ba4cd5c4587c0c2.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: application/json; charset=utf-8
traceparent: 00-836dd369c1826165a62e717f0325d79c-dd88235d6e335001-01
last-modified: Wed, 11 Jun 2025 14:06:48 GMT
etag: W/"8fe51848490ee8a9400ec1170c2ab5a0"
cache-control: max-age=3600
content-encoding: gzip
expires: Wed, 11 Jun 2025 15:40:34 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 3101
cache: HIT
x-cached-since: 2025-06-14T20:21:37+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/cec3125bacd27eb65f91e96df5e5f376.json | 185.244.209.62 | 200 OK | 22 kB |
URL GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/cec3125bacd27eb65f91e96df5e5f376.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hashff5d81879a491bb1cfe091c5817a89b4 2a1d20f61eb8c513b270b8d123e3a9f66c89f808 538bffce9fa55e37a08e6b7f5148f8e7884c02a82b13e8426553061ff2475f90
GET /genfiles/cms/1-1258/desktop/media_asset/cec3125bacd27eb65f91e96df5e5f376.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: application/json
traceparent: 00-08c8cb73253364d259810c5a11c0256e-94b2a5497069f9e8-01
last-modified: Tue, 20 May 2025 11:04:07 GMT
etag: W/"ff5d81879a491bb1cfe091c5817a89b4"
content-encoding: gzip
expires: Wed, 11 Jun 2025 10:06:30 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: REVALIDATED
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/main-static/e6b170ce/desktop/default/Betting.Core-ec7fa007.js | 185.244.209.62 | 200 OK | 2.2 kB |
URL GET v3.traincdn.com/main-static/e6b170ce/desktop/default/Betting.Core-ec7fa007.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (2180), with no line terminators Hash06955b378f75de84ec4ed4a91d7ba79f 1c2084b2adc691bd68a9a12eb637b7cc294b399e 313edd4dffbbabf366fbfab64bf70bf2e125039e7c98172a298ef31c8537e86d
GET /main-static/e6b170ce/desktop/default/Betting.Core-ec7fa007.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-c40ee9accfd05c4b1c86db0b0be7fa00-b6ca5d16ce461bea-01
last-modified: Thu, 12 Jun 2025 08:51:02 GMT
etag: W/"06955b378f75de84ec4ed4a91d7ba79f"
x-amz-meta-mtime: 1749718261.844055083
content-encoding: gzip
expires: Fri, 13 Jun 2025 09:02:34 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 43371
cache: HIT
x-cached-since: 2025-06-14T09:10:27+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_E2H7ZPXQ.js | 185.244.209.62 | 200 OK | 21 kB |
URL GET v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_E2H7ZPXQ.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (21232) Hash3cf0cae38afae9add22f7884e5061231 2a41037501375a439385a76a047876619683418f 322482e3beae5a985d069beea981614510fda90a5df7295b776a324d461fc43d
GET /sys-static/shared-assets/__shared_popper_js_E2H7ZPXQ.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-4faf269cd0f699d36884be8c99cf542b-4478c334098069bb-01
last-modified: Sat, 14 Jun 2025 08:38:11 GMT
etag: W/"3cf0cae38afae9add22f7884e5061231"
x-amz-meta-mtime: 1749890016.088065492
content-encoding: gzip
expires: Sun, 15 Jun 2025 09:03:54 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 43684
cache: HIT
x-cached-since: 2025-06-14T09:05:14+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/5ad56e0309d98c226f7c6f53c8988481.json | 185.244.209.62 | 200 OK | 1.4 kB |
URL GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/5ad56e0309d98c226f7c6f53c8988481.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash60800fc6a93e48491d94e7d6447b1709 632786af7227839842c02819d3d6340d13cc6125 62e20d1db7acda670afe7035a169bb1d4ba4adfac1251ad8a666edc7e14a5f8f
GET /genfiles/cms/1-1258/desktop/media_asset/5ad56e0309d98c226f7c6f53c8988481.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:19 GMT
content-type: application/json
traceparent: 00-6fb8682b1bb0a9fd8eaaeaf0b94088db-8c41ceb5c9e35411-01
last-modified: Thu, 15 May 2025 13:56:17 GMT
etag: W/"60800fc6a93e48491d94e7d6447b1709"
content-encoding: gzip
expires: Thu, 05 Jun 2025 08:40:15 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: REVALIDATED
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/e9aaf54249712e7e79892e2754c64bd7.json | 185.244.209.62 | 200 OK | 3.6 kB |
URL GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/e9aaf54249712e7e79892e2754c64bd7.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash4b08975411699bcd7464f49777e866bf 2a9b0a0f3eadf5f3e1ef688bacd9560dd59c73d2 b6208d18413f8988db2e0040ff72516c0cb5e06d3d9692b5b098808ab46fc378
GET /genfiles/cms/1-1258/desktop/media_asset/e9aaf54249712e7e79892e2754c64bd7.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:19 GMT
content-type: application/json
traceparent: 00-7c55931d7c4a0ed9cae58732ccf1bb05-74307a57847d3ad2-01
last-modified: Thu, 27 Feb 2025 09:07:33 GMT
etag: W/"4b08975411699bcd7464f49777e866bf"
content-encoding: gzip
expires: Thu, 05 Jun 2025 08:40:15 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: REVALIDATED
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/main-static/e6b170ce/desktop/default/vendors/plugins.vue-notification-58c4917a.js | 185.244.209.62 | 200 OK | 13 kB |
URL GET v3.traincdn.com/main-static/e6b170ce/desktop/default/vendors/plugins.vue-notification-58c4917a.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (12563), with no line terminators Hashe3a109633ace6ab35b7725a9ce258d1e 1427875a18593fc516851d95dfbe46e440e73280 d6886d00d9f912602d05c2d4aa336c6558441c6228faad77da7916e7b0e6d082
GET /main-static/e6b170ce/desktop/default/vendors/plugins.vue-notification-58c4917a.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-5e31ac71b7865d98f9f66fdc3e8bc659-233897c6286942a3-01
last-modified: Thu, 12 Jun 2025 08:51:05 GMT
etag: W/"e3a109633ace6ab35b7725a9ce258d1e"
x-amz-meta-mtime: 1749718261.860055239
content-encoding: gzip
expires: Fri, 13 Jun 2025 09:02:34 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 43371
cache: HIT
x-cached-since: 2025-06-14T09:10:27+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/main-static/e6b170ce/desktop/default/vendors/plugins.vue-js-modal-a7367d5f.js | 185.244.209.62 | 200 OK | 27 kB |
URL GET v3.traincdn.com/main-static/e6b170ce/desktop/default/vendors/plugins.vue-js-modal-a7367d5f.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (26667), with no line terminators Hashea184fef8045cfc2109ed27110506628 da5f61af129425afa5d9e3576e21a7e172632f2a 89deaf3b58659a235ff30f7f9b202b4cd1986b22a9a9e75cf22f23bc2bddb4af
GET /main-static/e6b170ce/desktop/default/vendors/plugins.vue-js-modal-a7367d5f.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-b2021bd3da85cde826850f12a4603b5e-4a14886a32a29375-01
last-modified: Thu, 12 Jun 2025 08:51:05 GMT
etag: W/"ea184fef8045cfc2109ed27110506628"
x-amz-meta-mtime: 1749718261.860055239
content-encoding: gzip
expires: Fri, 13 Jun 2025 09:02:34 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 43371
cache: HIT
x-cached-since: 2025-06-14T09:10:27+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6003f323ba.js | 185.244.209.62 | 200 OK | 3.9 kB |
URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6003f323ba.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3873) Hashb886859005a3d3fea54122a9950b3c92 bb0f7dfa9b580167eebb12b681daf89421a6ceda f608cf4079758fd800df0b4937540ed2330d25c905d53c777d59c5d50e5c272a
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6003f323ba.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:19 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-9b877598a8157e9773f0bac96ffed4b3-2fed9d0246f44696-01
last-modified: Wed, 11 Jun 2025 10:23:53 GMT
etag: W/"b886859005a3d3fea54122a9950b3c92"
x-amz-meta-mtime: 1749637066.108324997
content-encoding: gzip
expires: Fri, 13 Jun 2025 09:03:06 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 43007
cache: HIT
x-cached-since: 2025-06-14T09:16:32+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/main-static/e6b170ce/desktop/default/DC-d8610509.js | 185.244.209.62 | 200 OK | 2.7 kB |
URL GET v3.traincdn.com/main-static/e6b170ce/desktop/default/DC-d8610509.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (2653), with no line terminators Hashd9d8717c3e1aa56e4ea0ae354d8ca330 58c19cc951dff928577b9862b07212006d947540 71e0a53dd16e3b05b31a43aaa7a46f912c4a2c46c1f654965db57f43d111ea1c
GET /main-static/e6b170ce/desktop/default/DC-d8610509.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-71fc17eac62f770b3f3957e9ba0c2dfe-a90bfdd5e41706bb-01
last-modified: Thu, 12 Jun 2025 08:51:02 GMT
etag: W/"d9d8717c3e1aa56e4ea0ae354d8ca330"
x-amz-meta-mtime: 1749718261.844055083
content-encoding: gzip
expires: Fri, 13 Jun 2025 09:02:34 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 43371
cache: HIT
x-cached-since: 2025-06-14T09:10:27+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/1244ce60e9a4e015fc2b1c21b064b936.json | 185.244.209.62 | 200 OK | 13 kB |
URL GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/1244ce60e9a4e015fc2b1c21b064b936.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash2b474bcc2f009b70e64e2b5a95dd50a4 1fd5ee2d54da7dfbf61e67efd938a89c548fc866 f86d880575f3f65ddaaf9e8a0e3746bbbefcefe7e6c0c4441e9e20ceffdca237
GET /genfiles/cms/1-1258/desktop/media_asset/1244ce60e9a4e015fc2b1c21b064b936.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:19 GMT
content-type: application/json
traceparent: 00-87b36599d514961d1171879ad47fcf3b-149318de00cb1cde-01
last-modified: Wed, 12 Mar 2025 09:36:48 GMT
etag: W/"2b474bcc2f009b70e64e2b5a95dd50a4"
content-encoding: gzip
expires: Thu, 05 Jun 2025 08:40:15 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: REVALIDATED
X-Firefox-Spdy: h2
|
|
| GET 1xlite-446241.top/web-api/session | 178.253.14.230 | 204 No Content | 0 B |
URL GET 1xlite-446241.top/web-api/session IP178.253.14.230:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-446241.top FingerprintE4:92:BE:BA:35:7C:95:77:03:ED:E9:CD:D0:F5:4B:0A:C0:31:E8:76 ValidityMon, 19 May 2025 05:20:46 GMT - Sun, 17 Aug 2025 05:20:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /web-api/session HTTP/1.1
Host: 1xlite-446241.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/en/block
content-type: application/json
x-requested-with: XMLHttpRequest
x-app-n: v3-nuxt2
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0O5mhN5exw5fKXA8GCAg==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1280; che_g=c9365aa6-e939-e18f-3a7d-8424be5b84f2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Sat, 14 Jun 2025 21:13:26 GMT
cache-control: no-cache, private
server-timing: dt_total;dur=0.097, p;dur=25.156, wf-uht;dur=0.040
set-cookie: ua=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/
SESSION=e77a302ad5d96952ae4bd78e3eb541cb; path=/; secure; httponly; samesite=lax
x-dt: 1258
x-time-ng: 0.028, 0.027
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/main-static/e6b170ce/desktop/default/runtime-f2c85b9f.js | 185.244.209.62 | 200 OK | 19 kB |
URL GET v3.traincdn.com/main-static/e6b170ce/desktop/default/runtime-f2c85b9f.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (18930), with no line terminators Hash57530e0cd29e94ad1fe6e2a9c48ac3cf d430b5b036547e45e05b00028c9ce348c9afafdc bf0b2458cfb843c03ebdd9a3b802821085285ad2a236c04bc58a19b45825b53f
GET /main-static/e6b170ce/desktop/default/runtime-f2c85b9f.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:17 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-e94fb912091ef73edc3a89b7a6c6fb21-ec9589a1c0588449-01
last-modified: Thu, 12 Jun 2025 08:51:05 GMT
etag: W/"57530e0cd29e94ad1fe6e2a9c48ac3cf"
x-amz-meta-mtime: 1749718261.860055239
content-encoding: gzip
expires: Fri, 13 Jun 2025 09:02:33 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 43371
cache: HIT
x-cached-since: 2025-06-14T09:10:26+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_1971e4038469f37ec9a819d99d5b8f4a.json | 185.244.209.62 | 200 OK | 1.1 kB |
URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_1971e4038469f37ec9a819d99d5b8f4a.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hasha3810b04fc93c6b4f295ceb812f9f212 6cff2c69f8e43259380952d6c0df7ba563b7da8d c1afcca19f61498f21aab6c0ca6b1992f5c8b4baf281dfa14b780ed780035c54
GET /genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_1971e4038469f37ec9a819d99d5b8f4a.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: application/json; charset=utf-8
traceparent: 00-f8b0b66ba7b086fd120f36acdba8e579-d542b275d5a4b057-01
last-modified: Fri, 09 May 2025 16:06:27 GMT
etag: W/"a3810b04fc93c6b4f295ceb812f9f212"
cache-control: max-age=3600
content-encoding: gzip
expires: Fri, 09 May 2025 17:11:01 GMT
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 2603
cache: HIT
x-cached-since: 2025-06-14T20:29:55+00:00
X-Firefox-Spdy: h2
|
|
| GET 1xlite-446241.top/captcha-api/assets/hunt-captcha.js | 178.253.14.230 | 200 OK | 86 kB |
URL GET 1xlite-446241.top/captcha-api/assets/hunt-captcha.js IP178.253.14.230:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-446241.top FingerprintE4:92:BE:BA:35:7C:95:77:03:ED:E9:CD:D0:F5:4B:0A:C0:31:E8:76 ValidityMon, 19 May 2025 05:20:46 GMT - Sun, 17 Aug 2025 05:20:45 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash995686fa9daadfdb9b2db88054924cec ac0c6168ae60959598457e766cb3f691af69cdaf a31a605f2224c083c4dc7a6212e2a0d8ee3ec56cb1ad0dc990bba408185242d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /captcha-api/assets/hunt-captcha.js HTTP/1.1
Host: 1xlite-446241.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/en/block
Cookie: platform_type=desktop; auid=sv0O5mhN5exw5fKXA8GCAg==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1280; che_g=c9365aa6-e939-e18f-3a7d-8424be5b84f2; SESSION=e77a302ad5d96952ae4bd78e3eb541cb
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:26 GMT
content-type: text/javascript; charset=utf-8
cache-control: public, max-age=300
content-encoding: br
vary: Accept-Encoding
x-dt: 1258
x-request-id: 61e3f40c351aff445d170d00f56ffd0b
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.124, wf-uht;dur=0.021
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/main-static/e6b170ce/desktop/default/Page.Block-8b54715f.js | 185.244.209.62 | 200 OK | 476 B |
URL GET v3.traincdn.com/main-static/e6b170ce/desktop/default/Page.Block-8b54715f.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (476), with no line terminators Hashccba684abc6529739bb0faa909e87f10 7f2e2bb88350d341c77b618db5dfff34bdbc2d31 2304fe3ff45de8d3c6dcbadffd141d91b9450e83c190b6dc9f5c9519085b086f
GET /main-static/e6b170ce/desktop/default/Page.Block-8b54715f.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:17 GMT
content-type: text/javascript; charset=utf-8
content-length: 476
traceparent: 00-6fb31643b8cb6d373ce3351f39bcfe20-61d44be4d74d8a88-01
last-modified: Thu, 12 Jun 2025 08:51:02 GMT
etag: "ccba684abc6529739bb0faa909e87f10"
x-amz-meta-mtime: 1749718261.844055083
expires: Fri, 13 Jun 2025 09:02:45 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 43007
cache: HIT
x-cached-since: 2025-06-14T09:16:30+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/8c9565bcb3d75b5e56cf36e61ca88fc7.json | 185.244.209.62 | 200 OK | 465 B |
URL GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/8c9565bcb3d75b5e56cf36e61ca88fc7.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hashc18f57f4aff3cdc9ac4e9b71b54a5810 11e0ec9094d11ec4bfe5ef61cd09aa827df836d4 4844ea1e167daceb7a53a3b70c83d4389c19d42d0c1af060daf3a91ee7dbe64a
GET /genfiles/cms/1-1258/desktop/media_asset/8c9565bcb3d75b5e56cf36e61ca88fc7.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:19 GMT
content-type: application/json
content-length: 465
traceparent: 00-7e4ec739d9e12657fdcf92e11fd225ee-c70e93764adbf65a-01
last-modified: Mon, 01 Jul 2024 11:34:34 GMT
etag: "c18f57f4aff3cdc9ac4e9b71b54a5810"
expires: Thu, 05 Jun 2025 08:40:15 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: REVALIDATED
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/d3211fea84.js | 185.244.209.62 | 200 OK | 2.0 kB |
URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/d3211fea84.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1967) Hashbcfa472883db0fa730cb229a34201a2d 79433aee325f51d919f2001a2b61c1d194775cb4 eca0daaf73cae072963324918951869edc3192c5acfcfd2535a4f9c2ab0bb8ad
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/d3211fea84.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:19 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-14acc960532f89382bb9dc43b1eb1439-97eb3de2380bd271-01
last-modified: Wed, 11 Jun 2025 10:23:53 GMT
etag: W/"bcfa472883db0fa730cb229a34201a2d"
x-amz-meta-mtime: 1749637066.113325162
content-encoding: gzip
expires: Fri, 13 Jun 2025 09:03:06 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 43007
cache: HIT
x-cached-since: 2025-06-14T09:16:32+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png | 185.244.209.62 | 200 OK | 653 B |
URL GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typePNG image data, 32 x 32, 8-bit colormap, non-interlaced Hashe6f0766cbd95db33da44e7a9140648f2 5f196b1bfe8c3f92bd2ebcd67124e72e81ae6aaf c0399d478788d5d483f104a2e8cb7c32f41cb40e9df0c22e831b2bfa2db63ec0
GET /genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:17 GMT
content-type: image/png
content-length: 653
traceparent: 00-70d0b6237b167ddac178e8617d2d429c-bfb24f302d0e57b9-01
last-modified: Wed, 26 Jun 2024 08:18:02 GMT
etag: "e6f0766cbd95db33da44e7a9140648f2"
expires: Thu, 16 Jan 2025 10:46:36 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 3160
cache: HIT
x-cached-since: 2025-06-14T20:20:37+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_9100f09beb.js | 185.244.209.62 | 200 OK | 792 kB |
URL GET v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_9100f09beb.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (22825) Size792 kB (791676 bytes) Hashf371fd97d4fc0bc36fef3fbb06f1a125 49f5549ccdd16fab43acfba8c06f7a532e7c9e7b 997647adbe5bd9cf32041ad95e4b568bdcea347a4f4ba9da37a0e02a5c028d34
GET /sys-static/shared-assets/Desktop/__shared_base-app_9100f09beb.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-ff13d58fce97c54d57bcdc4ebcf6c2a8-06f005309eff44d4-01
last-modified: Fri, 13 Jun 2025 12:16:04 GMT
etag: W/"f371fd97d4fc0bc36fef3fbb06f1a125"
x-amz-meta-mtime: 1749816157.480422739
content-encoding: gzip
expires: Sun, 15 Jun 2025 09:54:35 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 39833
cache: HIT
x-cached-since: 2025-06-14T10:09:25+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_8b46a9664c9651861262cfa6b6d93914.json | 185.244.209.62 | 200 OK | 137 kB |
URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_8b46a9664c9651861262cfa6b6d93914.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Size137 kB (137371 bytes) Hash08eef519e763a1489a7b519149d114a2 d5e7a2d8023a59f3d15b9969e589ca5dca058bbf 7524d872a3b63454211abc4a1b365d681c7793104fc22584928596a1995fc88f
GET /genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_8b46a9664c9651861262cfa6b6d93914.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: application/json; charset=utf-8
traceparent: 00-55e0289513bad182719c643aaa0ce3c0-b1010a9a8956faf8-01
last-modified: Fri, 13 Jun 2025 22:06:27 GMT
etag: W/"08eef519e763a1489a7b519149d114a2"
cache-control: max-age=3600
content-encoding: gzip
expires: Fri, 13 Jun 2025 23:10:36 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 2676
cache: HIT
x-cached-since: 2025-06-14T20:28:42+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/d804af299e.js | 185.244.209.62 | 200 OK | 147 B |
URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/d804af299e.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash233c4fa0f7926cd21110f2dfe9861327 99ad13ab45e17976e39eabd2101470c0c6277e8c e3dde8ff153cc29d828e7b36050242b283707a8378b03de78e881a83486a7f28
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/d804af299e.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:19 GMT
content-type: text/javascript; charset=utf-8
content-length: 147
traceparent: 00-4ab3bfd8fdbb1caefdae7ab5eba1cf9f-c6c55798f3fa1765-01
last-modified: Wed, 11 Jun 2025 10:23:53 GMT
etag: "233c4fa0f7926cd21110f2dfe9861327"
x-amz-meta-mtime: 1749637066.113325162
expires: Fri, 13 Jun 2025 02:43:19 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 66514
cache: HIT
x-cached-since: 2025-06-14T02:44:45+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET 1xlite-446241.top/hd-api/external/assets/hdf.js | 178.253.14.230 | 200 OK | 4.1 kB |
URL GET 1xlite-446241.top/hd-api/external/assets/hdf.js IP178.253.14.230:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-446241.top FingerprintE4:92:BE:BA:35:7C:95:77:03:ED:E9:CD:D0:F5:4B:0A:C0:31:E8:76 ValidityMon, 19 May 2025 05:20:46 GMT - Sun, 17 Aug 2025 05:20:45 GMT
File typeC++ source, ASCII text, with very long lines (874) Hash40eaa62ed21bd753172f4c307e2a41d0 f7b03c6b004562311c8ca00466179629738b2a40 60fed8cb321dc09e4e1d910b5822bd8f67d53d0962a41ddc9f5ac33edd4e2213
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /hd-api/external/assets/hdf.js HTTP/1.1
Host: 1xlite-446241.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/en/block
Cookie: platform_type=desktop; auid=sv0O5mhN5exw5fKXA8GCAg==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1280; che_g=c9365aa6-e939-e18f-3a7d-8424be5b84f2; SESSION=e77a302ad5d96952ae4bd78e3eb541cb
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:26 GMT
content-type: text/javascript; charset=utf-8
content-length: 1620
accept-ranges: bytes
cache-control: public, max-age=300
content-encoding: gzip
etag: 40eaa62ed21bd753172f4c307e2a41d0
vary: Accept-Encoding
x-dt: 1258
x-request-guid: dd81e73159828da34b0cbe680010d4b8
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.067, wf-uht;dur=0.010
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 | 185.244.209.62 | 200 OK | 64 kB |
URL GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 63920, version 1.0 Hasha65527fcb58f66a7cfbc0e6b160538b4 45d260e7fa343401b5bb0df982a014f53e2d253b fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:27 GMT
content-type: font/woff2
content-length: 63920
traceparent: 00-ad37a5a2cee1de10d5819652098f71a4-fa9f3e5f700372a6-01
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "a65527fcb58f66a7cfbc0e6b160538b4"
expires: Thu, 16 Jan 2025 10:45:34 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 367
cache: HIT
x-cached-since: 2025-06-14T21:07:20+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET radar.cedexis.com/1707728419/stub.js |  45.54.49.5 | 200 OK | 390 B |
URL GET radar.cedexis.com/1707728419/stub.js IP45.54.49.5:443 ASN#63911 NetActuate, Inc
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerDigiCert Inc Subjectradar.cedexis.com FingerprintA2:3E:30:19:D5:41:3A:11:81:58:E3:B1:6F:F4:D2:78:0B:44:6F:D0 ValidityFri, 07 Mar 2025 00:00:00 GMT - Fri, 06 Mar 2026 23:59:59 GMT
File typeJavaScript source, ASCII text Hash82dec77fd0353c7c71ce053b8601387e fbbca95419e1d0c042e0a5fdf10f380aca66188c 39f2b7b0fa78d37d0c84d2d6618bd635d86fd683d9bcdd5729850cb2a62522f7
GET /1707728419/stub.js HTTP/1.1
Host: radar.cedexis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jun 2025 21:13:28 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 12 Feb 2024 09:51:01 GMT
Vary: Accept-Encoding
ETag: W/"65c9ea05-186"
Expires: Sat, 28 Jun 2025 21:13:28 GMT
Cache-Control: max-age=1209600, public
Content-Encoding: gzip
|
|
| POST 1xlite-446241.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json | 178.253.14.230 | 200 OK | 23 B |
URL POST 1xlite-446241.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json IP178.253.14.230:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-446241.top FingerprintE4:92:BE:BA:35:7C:95:77:03:ED:E9:CD:D0:F5:4B:0A:C0:31:E8:76 ValidityMon, 19 May 2025 05:20:46 GMT - Sun, 17 Aug 2025 05:20:45 GMT
Hash3ce6a7f3ebb4e2779a8d9863c6977156 bb072976e0a3817477fcd526028fcadadfa37677 15038af022ac8852e374c2e6c5a88f58ae93372f1a858edec324d152c39ee4a2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1
Host: 1xlite-446241.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/en/block
Content-Type: application/json
X-Lang: en
X-Uuid: c9d6da4c-b85c-4425-8bfa-f03e4d881e7d
Content-Length: 109
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0O5mhN5exw5fKXA8GCAg==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1280; che_g=c9365aa6-e939-e18f-3a7d-8424be5b84f2; SESSION=e77a302ad5d96952ae4bd78e3eb541cb
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:30 GMT
content-type: application/json
content-length: 23
x-dt: 1258
x-time-ng: 0.000
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.006, wf-uht;dur=0.008
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/main-static/e6b170ce/desktop/default/app-3560bae1.js | 185.244.209.62 | 200 OK | 504 kB |
URL GET v3.traincdn.com/main-static/e6b170ce/desktop/default/app-3560bae1.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators Size504 kB (503637 bytes) Hashd0b53c4e59e523ae308988ae0a7160c9 e6958b3bc557b1b820e0adb674d414ea85b4b194 8f38cdc14f57860fda1f450b3821d4e616baf5d397521dc39460e59ebf78d3f8
GET /main-static/e6b170ce/desktop/default/app-3560bae1.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:17 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-a82052ab897487ccb856cfabd05dd804-7f1822663f56848a-01
last-modified: Thu, 12 Jun 2025 08:51:03 GMT
etag: W/"d0b53c4e59e523ae308988ae0a7160c9"
x-amz-meta-mtime: 1749718261.852055161
content-encoding: gzip
expires: Fri, 13 Jun 2025 09:02:33 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 43370
cache: HIT
x-cached-since: 2025-06-14T09:10:27+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/main-static/e6b170ce/desktop/default/vendors/plugins.v-tooltip-676f1837.js | 185.244.209.62 | 200 OK | 77 kB |
URL GET v3.traincdn.com/main-static/e6b170ce/desktop/default/vendors/plugins.v-tooltip-676f1837.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65476) Hashff624a7b4d6af62165edebc6dc7d87e7 905f9edbda508fa0ca92a7262f438038ccf226a5 ba532407a871f07ff4d23e6e940229651a6b18c1336f9bcdc2ea35a2e2161323
GET /main-static/e6b170ce/desktop/default/vendors/plugins.v-tooltip-676f1837.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-be91c1a12d0fc968c4344606e62624d5-7d3d4b8c87d68ccd-01
last-modified: Thu, 12 Jun 2025 08:51:05 GMT
etag: W/"ff624a7b4d6af62165edebc6dc7d87e7"
x-amz-meta-mtime: 1749718261.860055239
content-encoding: gzip
expires: Fri, 13 Jun 2025 09:02:34 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 43371
cache: HIT
x-cached-since: 2025-06-14T09:10:27+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 | 185.244.209.62 | 200 OK | 64 kB |
URL GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 63920, version 1.0 Hasha65527fcb58f66a7cfbc0e6b160538b4 45d260e7fa343401b5bb0df982a014f53e2d253b fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:17 GMT
content-type: font/woff2
content-length: 63920
traceparent: 00-66a98281bdfd9caeeeaad78e7824f1fe-ba639d01f30b462f-01
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "a65527fcb58f66a7cfbc0e6b160538b4"
expires: Thu, 16 Jan 2025 10:45:34 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 357
cache: HIT
x-cached-since: 2025-06-14T21:07:20+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/main-static/e6b170ce/desktop/default/commons/app-3071efee.js | 185.244.209.62 | 200 OK | 138 kB |
URL GET v3.traincdn.com/main-static/e6b170ce/desktop/default/commons/app-3071efee.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65476) Size138 kB (138078 bytes) Hasha7db4567274e513ebd2ebb05bbd625e9 d34209df37e2c735496a68adc56ae2aad3a6353b b627e72171a9492058cc85e8cb52e7842d21682bd22e8c2558d0fef8501c5f6a
GET /main-static/e6b170ce/desktop/default/commons/app-3071efee.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:17 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-1a3d877d15e025c588faec443e90e07b-0da8ecc5a4de157c-01
last-modified: Thu, 12 Jun 2025 08:51:05 GMT
etag: W/"a7db4567274e513ebd2ebb05bbd625e9"
x-amz-meta-mtime: 1749718261.852055161
content-encoding: gzip
expires: Fri, 13 Jun 2025 09:02:33 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 43371
cache: HIT
x-cached-since: 2025-06-14T09:10:26+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/main-static/e6b170ce/desktop/default/css/7fe5f71b.css | 185.244.209.62 | 200 OK | 3.3 kB |
URL GET v3.traincdn.com/main-static/e6b170ce/desktop/default/css/7fe5f71b.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with very long lines (3313), with no line terminators Hashc610b8710368de3bf2f1c5bb581b6a3a f67bc86785d434adb2e81a356a7926b8818ac567 fad7111846310042401990719146401178f22e2618abf2b058e641b6495e8eba
GET /main-static/e6b170ce/desktop/default/css/7fe5f71b.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: text/css; charset=utf-8
traceparent: 00-3e038334aba41d409e793e0960572169-39749f2490b55ee6-01
last-modified: Thu, 12 Jun 2025 08:51:05 GMT
etag: W/"c610b8710368de3bf2f1c5bb581b6a3a"
x-amz-meta-mtime: 1749718261.852055161
content-encoding: gzip
expires: Fri, 13 Jun 2025 09:02:34 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 43371
cache: HIT
x-cached-since: 2025-06-14T09:10:27+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_945fd4a8d44260b2cdfe61dd0f83faa4.json | 185.244.209.62 | 200 OK | 27 kB |
URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_945fd4a8d44260b2cdfe61dd0f83faa4.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hashcc8f38014b9a73d843f59df14e1be17b 2ee86c36f0adb5b9786b44437f347cfb3345ff22 2cd15e3cc3b59839872989ee7115e4c16371db02c3a1464db3edf7123c67f3cc
GET /genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_945fd4a8d44260b2cdfe61dd0f83faa4.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: application/json; charset=utf-8
traceparent: 00-cd23a1de63a77e5186866fa454f0cd00-d3c2f773bfc9708c-01
last-modified: Wed, 11 Jun 2025 10:06:49 GMT
etag: W/"cc8f38014b9a73d843f59df14e1be17b"
cache-control: max-age=3600
content-encoding: gzip
expires: Wed, 11 Jun 2025 11:32:21 GMT
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 2619
cache: HIT
x-cached-since: 2025-06-14T20:29:39+00:00
X-Firefox-Spdy: h2
|
|
| GET 1xlite-446241.top/checker/redirect/stat/run/ | 178.253.14.230 | 200 OK | 76 B |
URL GET 1xlite-446241.top/checker/redirect/stat/run/ IP178.253.14.230:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-446241.top FingerprintE4:92:BE:BA:35:7C:95:77:03:ED:E9:CD:D0:F5:4B:0A:C0:31:E8:76 ValidityMon, 19 May 2025 05:20:46 GMT - Sun, 17 Aug 2025 05:20:45 GMT
Hash27c2416c1b923fecbcfc18d2fe0b93c8 c2bf774eb23aea67e9f24cb3c4aef31dc2575276 235990e7fa35e87bda0de418d7f4f59e238d6bcc4663db671e512f67f0e1a74b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /checker/redirect/stat/run/ HTTP/1.1
Host: 1xlite-446241.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/en/block
content-type: application/json
x-requested-with: XMLHttpRequest
x-app-n: v3-nuxt2
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0O5mhN5exw5fKXA8GCAg==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1280; che_g=c9365aa6-e939-e18f-3a7d-8424be5b84f2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
x-time-ng: 0.002
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.013
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png | 185.244.209.62 | 200 OK | 5.2 kB |
URL GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typePNG image data, 514 x 514, 8-bit colormap, non-interlaced Hashb9a636eef54b2844b571fe7de49184a7 bf653690790ced40eb3189da075a275d951d1607 001bfcdd52b658d46543a1aec889d35b73b3909b47097cc011b95e96fc9e3743
GET /genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: image/png
content-length: 5202
traceparent: 00-7644c8fdaabe3f63d017e490f83caa13-d4d33750420e9c9b-01
last-modified: Wed, 26 Jun 2024 08:22:59 GMT
etag: "b9a636eef54b2844b571fe7de49184a7"
expires: Thu, 16 Jan 2025 11:18:57 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: REVALIDATED
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-ui/2.3.230/Desktop/Default/client.css | 185.244.209.62 | 200 OK | 633 kB |
URL GET v3.traincdn.com/sys-ui/2.3.230/Desktop/Default/client.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size633 kB (632939 bytes) Hash3af56983e511ca50015a24c8dabfc456 c05b7802a0b2db99bb1be0bd7b16d5463043226b 58bbe9846617d402472d1de980cb0bc607220f991cbe335bb6d0d56e5c9c13fe
GET /sys-ui/2.3.230/Desktop/Default/client.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:17 GMT
content-type: text/css; charset=utf-8
traceparent: 00-e53da1502d15e19d63ff02e2501edef8-f9a0662ca2545b71-01
last-modified: Thu, 29 May 2025 07:44:19 GMT
etag: W/"3af56983e511ca50015a24c8dabfc456"
x-amz-meta-mtime: 1748504656.746417166
content-encoding: gzip
expires: Thu, 12 Jun 2025 09:55:47 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 40309
cache: HIT
x-cached-since: 2025-06-14T10:01:28+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/version.json | 185.244.209.62 | 200 OK | 11 B |
URL GET v3.traincdn.com/version.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash8d0e250e690af03be5978f390c91b788 65e5cdc4838fe742af30ad5a00eba30e34c960d2 b5ff361bc6cdff807f55856d8ddfa6b847b1e6b428bdf79dc0f217445596d48c
GET /version.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:17 GMT
content-type: application/json
content-length: 11
traceparent: 00-a145064c7152d7ed033bbc6ec64ea2fb-750b75ebccab3214-01
last-modified: Thu, 12 Jun 2025 08:53:28 GMT
etag: "8d0e250e690af03be5978f390c91b788"
x-amz-meta-mtime: 1749718408.105461212
expires: Thu, 12 Jun 2025 08:55:57 GMT
cache-control: max-age=60
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 28
cache: HIT
x-cached-since: 2025-06-14T21:12:49+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET 1xlite-446241.top/hd-api/external/0197704a-4ba6-7bb2-b09b-ab6209de5295.js | 178.253.14.230 | 200 OK | 304 kB |
URL GET 1xlite-446241.top/hd-api/external/0197704a-4ba6-7bb2-b09b-ab6209de5295.js IP178.253.14.230:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-446241.top FingerprintE4:92:BE:BA:35:7C:95:77:03:ED:E9:CD:D0:F5:4B:0A:C0:31:E8:76 ValidityMon, 19 May 2025 05:20:46 GMT - Sun, 17 Aug 2025 05:20:45 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size304 kB (304294 bytes) Hashfe93c40b7986b472d2dc0d6df8e122b3 a68479d7343b59c381df8b3c71868ccf44fca6da 0225e0557ec27465a889bb713009f192c4f962f8ea27f2c5d300e2b84dd67010
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /hd-api/external/0197704a-4ba6-7bb2-b09b-ab6209de5295.js HTTP/1.1
Host: 1xlite-446241.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/en/block
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0O5mhN5exw5fKXA8GCAg==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1280; che_g=c9365aa6-e939-e18f-3a7d-8424be5b84f2; SESSION=e77a302ad5d96952ae4bd78e3eb541cb
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:26 GMT
content-type: text/javascript; charset=utf-8
cache-control: private, max-age=0, must-revalidate
content-encoding: gzip
vary: Accept-Encoding
x-dt: 1258
x-hd-trace-id: 2d14dfba-93a9-4698-9bb0-fa9f4498fc6f
x-request-guid: f015ea88dcf6bbdfedd1326ba04b8c41
x-time-ng: 0.003
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.010, wf-uht;dur=0.023
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 | 185.244.209.62 | 200 OK | 64 kB |
URL GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 63748, version 1.0 Hash6887b6f24414dbc612dbf42ccdc76b70 8068d3abfbc6cbf35b55919da45b1f4d2d136238 fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:27 GMT
content-type: font/woff2
content-length: 63748
traceparent: 00-31334d44d45abd04ce2730c7cc108fa2-ed603402220240bb-01
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "6887b6f24414dbc612dbf42ccdc76b70"
expires: Thu, 16 Jan 2025 10:32:14 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 914
cache: HIT
x-cached-since: 2025-06-14T20:58:13+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-static/shared-assets/__shared_localforage_FJKG5M2E.js | 185.244.209.62 | 200 OK | 30 kB |
URL GET v3.traincdn.com/sys-static/shared-assets/__shared_localforage_FJKG5M2E.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (30255) Hash02cf95f00794b77df34632e34a59c5be b64889fb6cbe78a141688ea761a627997ef8a8af bf78b7b3dd6ecbdea04c575edfb6022ed1b2e98c7a9cb9f02ab851ca638f1b83
GET /sys-static/shared-assets/__shared_localforage_FJKG5M2E.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-45e66631b4cd68959f7d94abc8199f64-44c433960a06a660-01
last-modified: Fri, 13 Jun 2025 12:16:02 GMT
etag: W/"02cf95f00794b77df34632e34a59c5be"
x-amz-meta-mtime: 1749816157.500422946
content-encoding: gzip
expires: Sun, 15 Jun 2025 08:08:58 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 46655
cache: HIT
x-cached-since: 2025-06-14T08:15:43+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6190be1ac7.js | 185.244.209.62 | 200 OK | 1.2 kB |
URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6190be1ac7.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1165) Hash82e5b7a854636b19c7f31b9fc68a9572 4af4f156a94818760673099c0f67485bb0c49828 a23d12396b34e0f4897cea54b4beaab2f8d6cc13a0434d868cddb0bfb66e152d
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6190be1ac7.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:19 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-4230ea01711b6918c1c88c03aaf98401-4318855b096fe0f4-01
last-modified: Wed, 11 Jun 2025 10:23:53 GMT
etag: W/"82e5b7a854636b19c7f31b9fc68a9572"
x-amz-meta-mtime: 1749637066.10932503
content-encoding: gzip
expires: Fri, 13 Jun 2025 02:43:19 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 66514
cache: HIT
x-cached-since: 2025-06-14T02:44:45+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_c475e7b28b6b22307751b2c2c28273a7.json | 185.244.209.62 | 200 OK | 23 kB |
URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_c475e7b28b6b22307751b2c2c28273a7.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash7889ae7db096d748d942dbf58bd893b6 e9fc563f031d510363a597702fd9c4ca070aa870 a5145ccfed8e62882a5e36ab1bacad3c6fd36f203bf8b37e0ec20298fe7df20c
GET /genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_c475e7b28b6b22307751b2c2c28273a7.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: application/json; charset=utf-8
traceparent: 00-f538b20b346e69c5d48392b4a8c78b57-fd1a8f2fe7d21a47-01
last-modified: Tue, 03 Jun 2025 08:06:56 GMT
etag: W/"c08ec4640f6ba3d9b8a7363620465d67"
cache-control: max-age=3600
content-encoding: gzip
expires: Tue, 03 Jun 2025 09:40:13 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 28
cache: HIT
x-cached-since: 2025-06-14T21:12:50+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_DYMTJONH.js | 185.244.209.62 | 200 OK | 19 kB |
URL GET v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_DYMTJONH.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (19034) Hash1580a3cfe81fd30910a49dfe64cc8e7b 314144dc49595482ba46c0b85b38d5f73ef73a7b 8989a021d20f0fc08c43966a287cbd99e43142a5a0ff42eb232756a101de6035
GET /sys-static/shared-assets/__shared_vue_deps_DYMTJONH.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-0e924ffa68cb8be842c5319502274fbd-3f46058511b489ee-01
last-modified: Sat, 14 Jun 2025 08:38:11 GMT
etag: W/"1580a3cfe81fd30910a49dfe64cc8e7b"
x-amz-meta-mtime: 1749890016.088065492
content-encoding: gzip
expires: Sun, 15 Jun 2025 19:03:45 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 7755
cache: HIT
x-cached-since: 2025-06-14T19:04:03+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_B6TW5FDZ.js | 185.244.209.62 | 200 OK | 1.3 kB |
URL GET v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_B6TW5FDZ.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1265) Hashe3f1c4089db6b910890e85d97a2e2066 85828920da3c3fd7856acde184e835ac314295cd 6c28afe5a52e0f9b1138fe498b254c8671058a058b555651ccae8e91e7534614
GET /sys-static/shared-assets/__shared_accept_language_parser_B6TW5FDZ.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-0ffef54da655fee8d00a7458a1cb9902-e190a3c19c2917e7-01
last-modified: Sat, 14 Jun 2025 08:38:11 GMT
etag: W/"e3f1c4089db6b910890e85d97a2e2066"
x-amz-meta-mtime: 1749890016.087065464
content-encoding: gzip
expires: Sun, 15 Jun 2025 17:53:06 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 12012
cache: HIT
x-cached-since: 2025-06-14T17:53:06+00:00
X-Firefox-Spdy: h2
|
|
| GET 1xlite-446241.top/bff-api/config/group/get?groups=d.technical&lang=en | 178.253.14.230 | 200 OK | 730 B |
URL GET 1xlite-446241.top/bff-api/config/group/get?groups=d.technical&lang=en IP178.253.14.230:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-446241.top FingerprintE4:92:BE:BA:35:7C:95:77:03:ED:E9:CD:D0:F5:4B:0A:C0:31:E8:76 ValidityMon, 19 May 2025 05:20:46 GMT - Sun, 17 Aug 2025 05:20:45 GMT
Hashdcff1c0930ae924e669223c942f1bb8f 5c9d445bcbba4ed1cda92f9e6dcf3c82bf2a10fa e6524af063e87f37a0f9e0bd60f13336db66f6791295f6a16b3bf2e92eb606cb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /bff-api/config/group/get?groups=d.technical&lang=en HTTP/1.1
Host: 1xlite-446241.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/en/block
content-type: application/json
x-requested-with: XMLHttpRequest
is-srv: false
x-svc-source: __TECHNICAL_PAGES_APP__
x-app-n: __TECHNICAL_PAGES_APP__
x-geoip2-country-code: ru
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0O5mhN5exw5fKXA8GCAg==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1920; che_g=c9365aa6-e939-e18f-3a7d-8424be5b84f2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: application/json
content-length: 730
cache-control: no-cache, private
server-timing: dt_total;dur=0.101, bff;dur=7.17, wf-uht;dur=0.019
x-dt: 1258
x-pod: R-85w5d
x-time-ng: 0.009
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/0bfc54288673ecc355ae1cc451091289.json | 185.244.209.62 | 200 OK | 7.3 kB |
URL GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/0bfc54288673ecc355ae1cc451091289.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash0614058b667e6dfa1cdecc6e0e53131c 4f20f88c436fb5cbd82cf1dcfeaa14e52195a369 be16474b0f19b7536ebdd3d0f8867b151eaa4638411ddb46845f887a5d51a653
GET /genfiles/cms/1-1258/desktop/media_asset/0bfc54288673ecc355ae1cc451091289.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: application/json
traceparent: 00-ce5af1177c11c4e7f609774fd3c734eb-c5e9e3b28d20e173-01
last-modified: Thu, 23 Jan 2025 13:22:52 GMT
etag: W/"0614058b667e6dfa1cdecc6e0e53131c"
content-encoding: gzip
expires: Wed, 11 Jun 2025 10:06:30 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: REVALIDATED
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js | 185.244.209.62 | 200 OK | 69 B |
URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash2cdaa92927f02e0b628f1ef4d7dd8caf 9104a2e16ed080b80a42588b8aeb52ebec47ab7a ef8101ffea52addcdcfcc3a83f96ff2d4613fb3ae6d1c16bbe4852387b73a9db
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: text/javascript; charset=utf-8
content-length: 69
traceparent: 00-a6a6ff793cd263fe63b664db94438677-c8c7c469458d1b2f-01
last-modified: Wed, 11 Jun 2025 10:23:53 GMT
etag: "2cdaa92927f02e0b628f1ef4d7dd8caf"
x-amz-meta-mtime: 1749637066.106324931
expires: Thu, 12 Jun 2025 18:35:36 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 8845
cache: HIT
x-cached-since: 2025-06-14T18:45:53+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/3269ef480c0b8ea6baff7a6c347f07f7.json | 185.244.209.62 | 200 OK | 1.3 kB |
URL GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/3269ef480c0b8ea6baff7a6c347f07f7.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash499d57f89b2bf5fed52d984d865fd72c f3dd138886f2c1e257d3ac2214b7e3cba57e56b2 9467cf5576ce2a97d9e44e53915a9c4ae529c134cc1ea5a3c62ea304eebda0c8
GET /genfiles/cms/1-1258/desktop/media_asset/3269ef480c0b8ea6baff7a6c347f07f7.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:19 GMT
content-type: application/json
traceparent: 00-84b50e6262eb204a3399ad9183509dfa-7a12bce831008f98-01
last-modified: Thu, 27 Feb 2025 08:18:57 GMT
etag: W/"499d57f89b2bf5fed52d984d865fd72c"
content-encoding: gzip
expires: Wed, 11 Jun 2025 10:06:31 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: REVALIDATED
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/1c88a5dff952a7ff7729f92263f647d8.json | 185.244.209.62 | 200 OK | 241 B |
URL GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/1c88a5dff952a7ff7729f92263f647d8.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash39257fbb62736206d5245e08925d7b60 4c11e3cb6a16b884772b88acdba30a2ad98e86b8 3a3cf0f5c60899ffb49d9825516aec475fd7b78cea8ae0b5b58dfb4e658f041e
GET /genfiles/cms/1-1258/desktop/media_asset/1c88a5dff952a7ff7729f92263f647d8.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:19 GMT
content-type: application/json
content-length: 241
traceparent: 00-adb8d93b089fa6352e623af784af5143-e1242297eac7fee2-01
last-modified: Thu, 27 Feb 2025 13:25:46 GMT
etag: "39257fbb62736206d5245e08925d7b60"
expires: Wed, 11 Jun 2025 10:06:31 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: REVALIDATED
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/ad227066db.js | 185.244.209.62 | 200 OK | 4.1 kB |
URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/ad227066db.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (4047) Hash852d499a2dac9b9a5bff01bd2fbdd026 6222c1646b9bb2c749ad5fd495fb64b665e54546 f897899bcdc73452dde28dd930da497f2f805273c89e6c250df636f5b3243802
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/ad227066db.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:19 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-3b791a881b27682534f80d0a07f00365-29e6447e9838d48e-01
last-modified: Wed, 11 Jun 2025 10:23:53 GMT
etag: W/"852d499a2dac9b9a5bff01bd2fbdd026"
x-amz-meta-mtime: 1749637066.110325063
content-encoding: gzip
expires: Fri, 13 Jun 2025 02:43:19 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 66514
cache: HIT
x-cached-since: 2025-06-14T02:44:45+00:00
X-Firefox-Spdy: h2
|
|
| POST 1xlite-446241.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json | 178.253.14.230 | 200 OK | 23 B |
URL POST 1xlite-446241.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json IP178.253.14.230:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-446241.top FingerprintE4:92:BE:BA:35:7C:95:77:03:ED:E9:CD:D0:F5:4B:0A:C0:31:E8:76 ValidityMon, 19 May 2025 05:20:46 GMT - Sun, 17 Aug 2025 05:20:45 GMT
Hash53b433e3c88cda54ef6b91ddb1e36dce 73ce01999724116d2757e8b774d034bad542b2ed 2b561c6348b75a8e5503804031f60836df85ee10c7966187e02093c9d3becf4e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1
Host: 1xlite-446241.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/en/block
Content-Type: application/json
X-Lang: en
X-Uuid: c9d6da4c-b85c-4425-8bfa-f03e4d881e7d
Content-Length: 72
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0O5mhN5exw5fKXA8GCAg==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1280; che_g=c9365aa6-e939-e18f-3a7d-8424be5b84f2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:19 GMT
content-type: application/json
content-length: 23
x-dt: 1258
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.099, wf-uht;dur=0.010
X-Firefox-Spdy: h2
|
|
| GET 1xlite-446241.top/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js | 178.253.14.230 | 200 OK | 760 B |
URL GET 1xlite-446241.top/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js IP178.253.14.230:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-446241.top FingerprintE4:92:BE:BA:35:7C:95:77:03:ED:E9:CD:D0:F5:4B:0A:C0:31:E8:76 ValidityMon, 19 May 2025 05:20:46 GMT - Sun, 17 Aug 2025 05:20:45 GMT
File typeJavaScript source, ASCII text, with very long lines (759) Hash0b911773e0df627d77f8306c86e228aa 0d584bb1a3294e4fe42df4582dcc8a2c8f77f7bb 01e4926540498a77d866259516007d41fae1213ab9607db826f011d926fd6006
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js HTTP/1.1
Host: 1xlite-446241.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/en/block
Cookie: platform_type=desktop; auid=sv0O5mhN5exw5fKXA8GCAg==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1280; che_g=c9365aa6-e939-e18f-3a7d-8424be5b84f2; SESSION=e77a302ad5d96952ae4bd78e3eb541cb
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:26 GMT
content-type: text/javascript; charset=utf-8
content-length: 492
accept-ranges: bytes
cache-control: public, max-age=300
content-encoding: gzip
etag: 0b911773e0df627d77f8306c86e228aa
vary: Accept-Encoding
x-dt: 1258
x-request-guid: 299206c8f7b8b2d3d29effe87adf3031
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.073, wf-uht;dur=0.012
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6293f1a8ca.css | 185.244.209.62 | 200 OK | 650 B |
URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6293f1a8ca.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with very long lines (649) Hash5d70ac7829c3ae41ce5c0971c798fbcf 9996ce3a09f56d3e37d67fbe7e1efb301ea2f261 0e76b1cd191bd618caea37cb7fb6673d12c7cdff7ea47e939758eda5764a140b
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6293f1a8ca.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:17 GMT
content-type: text/css; charset=utf-8
content-length: 650
traceparent: 00-ef981f3f17e5a13b2067dcc134e4dd79-306b2c8756be10c4-01
last-modified: Wed, 11 Jun 2025 10:23:53 GMT
etag: "5d70ac7829c3ae41ce5c0971c798fbcf"
x-amz-meta-mtime: 1749637066.10932503
expires: Fri, 13 Jun 2025 09:17:06 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 42293
cache: HIT
x-cached-since: 2025-06-14T09:28:24+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/8f5baa79dd.js | 185.244.209.62 | 200 OK | 1.2 kB |
URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/8f5baa79dd.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (833) Hashf7e37ebd12b14d4b1601ce883158b83f 04af176e528630a964ec3b011cbceb5f64f34752 af238d077c57927faccf25bd23f9f6647d72af7e7be300be0b04037ebaeef7a5
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/8f5baa79dd.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-caebfcd9451d90a58c70e7565785a878-0c90f995e674a864-01
last-modified: Wed, 11 Jun 2025 10:23:53 GMT
etag: W/"f7e37ebd12b14d4b1601ce883158b83f"
x-amz-meta-mtime: 1749637066.110325063
content-encoding: gzip
expires: Fri, 13 Jun 2025 09:03:05 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 43007
cache: HIT
x-cached-since: 2025-06-14T09:16:31+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_35640ce886b5a6c19be48091b77662c1.json | 185.244.209.62 | 200 OK | 21 kB |
URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_35640ce886b5a6c19be48091b77662c1.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (21045), with no line terminators Hash02f5214cbe7a618b98e6bb50a9311f33 ec7e3f044d68479233859aa5d9163af789e18386 9d9104813c2388ff1e2e6b36500493a0ccc3d22f1d83d5d090daa395db65eb25
GET /genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_35640ce886b5a6c19be48091b77662c1.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: application/json; charset=utf-8
traceparent: 00-1c6e2208fa17b5ca8355356015f69869-0361cfe5bdc950d4-01
last-modified: Wed, 11 Jun 2025 16:06:43 GMT
etag: W/"0ef44902585a16035748c096a3178f53"
cache-control: max-age=3600
content-encoding: gzip
expires: Wed, 11 Jun 2025 17:40:37 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 2660
cache: HIT
x-cached-since: 2025-06-14T20:28:58+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-ui/3.3.249/Desktop/Default/merged.css | 185.244.209.62 | 200 OK | 948 kB |
URL GET v3.traincdn.com/sys-ui/3.3.249/Desktop/Default/merged.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size948 kB (947873 bytes) Hashbd80f89b891244c3a1ec2eb78bbb4fe3 e7c191de4211e74819ecd7427a4731cb25816613 0e2b261500133ae9ff2ce114d9f4361141e5426e4706a831339e44329ba16ba5
GET /sys-ui/3.3.249/Desktop/Default/merged.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:17 GMT
content-type: text/css; charset=utf-8
traceparent: 00-37f9b18a00256c94f0872762cdb6c215-24c449303ec9e224-01
last-modified: Fri, 13 Jun 2025 14:06:53 GMT
etag: W/"bd80f89b891244c3a1ec2eb78bbb4fe3"
x-amz-meta-mtime: 1749823583.2154568
content-encoding: gzip
expires: Sat, 14 Jun 2025 14:10:40 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 25169
cache: HIT
x-cached-since: 2025-06-14T14:13:48+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/main-static/e6b170ce/desktop/default/vendors/app-d7417fdd.js | 185.244.209.62 | 200 OK | 1.4 MB |
URL GET v3.traincdn.com/main-static/e6b170ce/desktop/default/vendors/app-d7417fdd.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (64032) Size1.4 MB (1393850 bytes) Hashf97166985fba0599caee61b22fea1357 16bf76843b0d9ff70c8f4594b50afe1be6290722 9f29bab947020f829d51b2e6ff0a34f6da6b72c2e72357fcda7f26d707422ada
GET /main-static/e6b170ce/desktop/default/vendors/app-d7417fdd.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:17 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-f09eee2c8bf03327d1f219f7d9914454-29139e734cb7837e-01
last-modified: Thu, 12 Jun 2025 08:51:05 GMT
etag: W/"f97166985fba0599caee61b22fea1357"
x-amz-meta-mtime: 1749718261.860055239
content-encoding: gzip
expires: Fri, 13 Jun 2025 09:02:33 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 43371
cache: HIT
x-cached-since: 2025-06-14T09:10:26+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-c3a5232530.js | 185.244.209.62 | 200 OK | 21 kB |
URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-c3a5232530.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20628) Hash1ec295db016c12c2ce14a413608d2644 924bc1002e1a3949c4a79d23acf5383cbae4886c 07b560d3a9f4f1302996bd086a1e1befbdc412447627db3fae16716f235ba9e0
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-c3a5232530.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-d0b47f4eea47eec045ead268cb4a784f-573cfd4fb825ee26-01
last-modified: Wed, 11 Jun 2025 10:23:53 GMT
etag: W/"1ec295db016c12c2ce14a413608d2644"
x-amz-meta-mtime: 1749637066.112325129
content-encoding: gzip
expires: Fri, 13 Jun 2025 02:43:18 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 66514
cache: HIT
x-cached-since: 2025-06-14T02:44:44+00:00
X-Firefox-Spdy: h2
|
|
| POST 1xlite-446241.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json | 178.253.14.230 | 200 OK | 23 B |
URL POST 1xlite-446241.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json IP178.253.14.230:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-446241.top FingerprintE4:92:BE:BA:35:7C:95:77:03:ED:E9:CD:D0:F5:4B:0A:C0:31:E8:76 ValidityMon, 19 May 2025 05:20:46 GMT - Sun, 17 Aug 2025 05:20:45 GMT
Hash4058498b9a41f037e955b0db62f26c65 5482e95bd3c5db0de994d3b10119ee545abcb6f3 c23c5614753851ba9bb77db6d2e622f45fcea779657e9263e34ba4c57081f2ca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1
Host: 1xlite-446241.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/en/block
Content-Type: application/json
X-Lang: en
X-Uuid: c9d6da4c-b85c-4425-8bfa-f03e4d881e7d
Content-Length: 89
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0O5mhN5exw5fKXA8GCAg==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1280; che_g=c9365aa6-e939-e18f-3a7d-8424be5b84f2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: application/json
content-length: 23
x-dt: 1258
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.045, wf-uht;dur=0.013
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-static/shared-assets/__shared_libphonenumber_js_Q6RMKWT6.js | 185.244.209.62 | 200 OK | 159 kB |
URL GET v3.traincdn.com/sys-static/shared-assets/__shared_libphonenumber_js_Q6RMKWT6.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with very long lines (65509) Size159 kB (158815 bytes) Hash1da464d70e78b04b9b808e82e4ad9487 0c79e65516d1525ecb43d13cfb4ccb0631095a28 b4c72b8036ca6767ab61490178f901538646f2aa1001cb042caa134174a41595
GET /sys-static/shared-assets/__shared_libphonenumber_js_Q6RMKWT6.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-ddbf68495aab9a0c5ded582e1af95427-e066984c9710610c-01
last-modified: Fri, 13 Jun 2025 12:16:02 GMT
etag: W/"1da464d70e78b04b9b808e82e4ad9487"
x-amz-meta-mtime: 1749816157.56442361
content-encoding: gzip
expires: Sun, 15 Jun 2025 08:08:56 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 46649
cache: HIT
x-cached-since: 2025-06-14T08:15:49+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_bc0570f08a28537dc724f4764ecf77e4.json | 185.244.209.62 | 200 OK | 2.3 kB |
URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_bc0570f08a28537dc724f4764ecf77e4.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash7c12ae6fc08684f50822b3eb56779e29 036c726b8b7b2d24f987391101f3e8d1a2a183cf a2eac45353675c82733192916712b8876c6b038b7bdbddc24df464e38b67cbfd
GET /genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_bc0570f08a28537dc724f4764ecf77e4.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: application/json; charset=utf-8
traceparent: 00-ac7b49235fc56397e509f2892c66a05e-3ea3fb6debdf3bcd-01
last-modified: Tue, 22 Apr 2025 08:06:29 GMT
etag: W/"7c12ae6fc08684f50822b3eb56779e29"
cache-control: max-age=3600
content-encoding: gzip
expires: Tue, 22 Apr 2025 09:26:34 GMT
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 3062
cache: HIT
x-cached-since: 2025-06-14T20:22:16+00:00
X-Firefox-Spdy: h2
|
|
| GET radar.cedexis.com/1/23802/radar.js | 45.54.49.5 | 302 Moved Temporarily | 390 B |
URL GET radar.cedexis.com/1/23802/radar.js IP45.54.49.5:443 ASN#63911 NetActuate, Inc
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerDigiCert Inc Subjectradar.cedexis.com FingerprintA2:3E:30:19:D5:41:3A:11:81:58:E3:B1:6F:F4:D2:78:0B:44:6F:D0 ValidityFri, 07 Mar 2025 00:00:00 GMT - Fri, 06 Mar 2026 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/23802/radar.js HTTP/1.1
Host: radar.cedexis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sat, 14 Jun 2025 21:13:28 GMT
Content-Type: text/html
Content-Length: 138
Connection: keep-alive
Location: /1707728419/stub.js
Expires: Sat, 14 Jun 2025 21:23:28 GMT
Cache-Control: max-age=600
Vary: User-Agent,DNT
|
|
| POST 1xlite-446241.top/hd-api/external/verify | 178.253.14.230 | 200 OK | 715 B |
URL POST 1xlite-446241.top/hd-api/external/verify IP178.253.14.230:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-446241.top FingerprintE4:92:BE:BA:35:7C:95:77:03:ED:E9:CD:D0:F5:4B:0A:C0:31:E8:76 ValidityMon, 19 May 2025 05:20:46 GMT - Sun, 17 Aug 2025 05:20:45 GMT
Hash0205230550dbb25fdec1d0ae5b25f332 9edd0c996cc6fcf62f22f629f92337184d78fc12 d538e7894fc3768796b69ff2961e9b44c9633fe024369536d85018d2c520f3d0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /hd-api/external/verify HTTP/1.1
Host: 1xlite-446241.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/en/block
Content-Type: text/plain;charset=UTF-8
Content-Length: 108777
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; auid=sv0O5mhN5exw5fKXA8GCAg==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1280; che_g=c9365aa6-e939-e18f-3a7d-8424be5b84f2; SESSION=e77a302ad5d96952ae4bd78e3eb541cb
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:28 GMT
content-type: application/json
content-length: 585
content-encoding: gzip
vary: Accept-Encoding
x-dt: 1258
x-request-guid: 20078d6ec97e786a3331b4bf5c6042db
x-time-ng: 0.015
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.009, wf-uht;dur=0.061
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/main-static/e6b170ce/desktop/default/css/684d7545.css | 185.244.209.62 | 200 OK | 14 kB |
URL GET v3.traincdn.com/main-static/e6b170ce/desktop/default/css/684d7545.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with very long lines (14391), with no line terminators Hasha552d5db890b7f16e370b33cc587e807 a9dc47737b3e1d8ef6fcbb48c7c0b026c6fda545 0d7e00204297499711ae1da574d4635b31d8238ab4a663b382c44d850d24f3ec
GET /main-static/e6b170ce/desktop/default/css/684d7545.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:17 GMT
content-type: text/css; charset=utf-8
traceparent: 00-b62a34e03bc82863d0b8a4b176fbecb5-950e7dd07f2402c3-01
last-modified: Thu, 12 Jun 2025 08:51:05 GMT
etag: W/"a552d5db890b7f16e370b33cc587e807"
x-amz-meta-mtime: 1749718261.852055161
content-encoding: gzip
expires: Fri, 13 Jun 2025 09:02:33 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 43371
cache: HIT
x-cached-since: 2025-06-14T09:10:26+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/48593960336c3075164f79d77fe845c4.json | 185.244.209.62 | 200 OK | 747 B |
URL GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/48593960336c3075164f79d77fe845c4.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hashf4e90636ec9cff061c4301b3cefdd0d6 c506efe9c3672c58434ea10021dab0ad81b1ad98 30666f138ccc12735e2f8a6405ddce4a3d8756b9445e3b2732fa2970f14dbcea
GET /genfiles/cms/1-1258/desktop/media_asset/48593960336c3075164f79d77fe845c4.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: application/json
content-length: 747
traceparent: 00-027cc346fab3ee0c05a96cc9a6bd899a-7e9094a90f6e6073-01
last-modified: Thu, 27 Feb 2025 13:27:57 GMT
etag: "f4e90636ec9cff061c4301b3cefdd0d6"
expires: Wed, 11 Jun 2025 10:06:30 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: REVALIDATED
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/site-admin/css_vars/29b5cda95fa390c124de39b6aeca6d24.css | 185.244.209.62 | 200 OK | 46 B |
URL GET v3.traincdn.com/genfiles/site-admin/css_vars/29b5cda95fa390c124de39b6aeca6d24.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash29b5cda95fa390c124de39b6aeca6d24 46f68f69533c1fdc737eb36e8e7af7672178e610 6021ec0aede22eadcb8401fe945d345202320437c7be01b157f0cb282ebe7c88
GET /genfiles/site-admin/css_vars/29b5cda95fa390c124de39b6aeca6d24.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: text/css
content-length: 46
traceparent: 00-8b8831612ad22e9d2c1a8f03dbb30dff-972df1faf29ecd60-01
last-modified: Thu, 20 Mar 2025 13:29:31 GMT
etag: "29b5cda95fa390c124de39b6aeca6d24"
cache-control: max-age=3600
expires: Thu, 20 Mar 2025 14:32:37 GMT
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 3220
cache: HIT
x-cached-since: 2025-06-14T20:19:38+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/766b34ab6b77ad5d1bb966ea7bf6c157.json | 185.244.209.62 | 200 OK | 14 kB |
URL GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/766b34ab6b77ad5d1bb966ea7bf6c157.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash811ce3b7877d19901e45430cb6523d62 16a905115a678fdef3923f91c6f76cbab613e84d 10fbb74dbac63abfe9c4f5a77abc03757ef3527a479d4ae70dc977b515eec8cb
GET /genfiles/cms/1-1258/desktop/media_asset/766b34ab6b77ad5d1bb966ea7bf6c157.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: application/json
traceparent: 00-3b1392d6cf0f1a95cb53d22be8cb099e-7140d512012ab7b4-01
last-modified: Thu, 27 Feb 2025 09:05:23 GMT
etag: W/"811ce3b7877d19901e45430cb6523d62"
content-encoding: gzip
expires: Wed, 11 Jun 2025 10:06:30 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: REVALIDATED
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/16c95291ac.js | 185.244.209.62 | 200 OK | 27 kB |
URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/16c95291ac.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (27023) Hashe6751f52c66d21ae12a897312d5f997f 33020b508ba182d1ea117da3dc647dad7388f0de 575099e2e78af922439f4057a2ee05911c834bdd2dd6cf380041bfed204ea58a
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/16c95291ac.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:19 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-18f778408383f7b5ad90303373706819-6041aa131a3f1fe2-01
last-modified: Wed, 11 Jun 2025 10:23:53 GMT
etag: W/"e6751f52c66d21ae12a897312d5f997f"
x-amz-meta-mtime: 1749637066.110325063
content-encoding: gzip
expires: Fri, 13 Jun 2025 09:03:06 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 43007
cache: HIT
x-cached-since: 2025-06-14T09:16:32+00:00
X-Firefox-Spdy: h2
|
|
| GET 1xlite-446241.top/en/ | 178.253.14.230 | 301 Moved Permanently | 263 kB |
IP178.253.14.230:443 ASN#202492 Silverhill Group Holding Ltd
CertificateIssuerLet's Encrypt Subject1xlite-446241.top FingerprintE4:92:BE:BA:35:7C:95:77:03:ED:E9:CD:D0:F5:4B:0A:C0:31:E8:76 ValidityMon, 19 May 2025 05:20:46 GMT - Sun, 17 Aug 2025 05:20:45 GMT
Size263 kB (262582 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /en/ HTTP/1.1
Host: 1xlite-446241.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 14 Jun 2025 21:13:16 GMT
location: /en
reason-v3: slash_end
server-timing: dt_total;dur=0.007, total;dur=0;desc="Nuxt Server Time", wf-uht;dur=0.011
set-cookie: platform_type=desktop; Path=/; Expires=Tue, 17 Jun 2025 21:13:16 GMT; Secure; SameSite=None; Partitioned
gw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned
auid=sv0O5mhN5exw5fKXA8GCAg==; path=/; secure; httponly; samesite=lax
x-dt: 1258
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/site-admin/colors/11fcf67d96d7d317c64c54b46d5ec44f.css | 185.244.209.62 | 200 OK | 40 kB |
URL GET v3.traincdn.com/genfiles/site-admin/colors/11fcf67d96d7d317c64c54b46d5ec44f.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with very long lines (39742), with no line terminators Hash11fcf67d96d7d317c64c54b46d5ec44f abf4e85e9e932ed64412f46ff590b39a87e26cb9 96ec24e0f388bf29d22bc262d0ed8aecf4582efa4d2031a06566442663f68658
GET /genfiles/site-admin/colors/11fcf67d96d7d317c64c54b46d5ec44f.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: text/css
traceparent: 00-c2e32fcf0b7e247d99f2d396fc388cfa-33f31f1b439c809b-01
last-modified: Thu, 12 Jun 2025 10:21:10 GMT
etag: W/"11fcf67d96d7d317c64c54b46d5ec44f"
cache-control: max-age=3600
content-encoding: gzip
expires: Thu, 12 Jun 2025 11:48:12 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 2006
cache: HIT
x-cached-since: 2025-06-14T20:39:52+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/3235fa3ecbc01182d696aaea74f8db10.json | 185.244.209.62 | 200 OK | 13 kB |
URL GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/3235fa3ecbc01182d696aaea74f8db10.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash0c06a2ce7b44d920632095b7968f05e7 ad620299a407c218f382d66ccc64eb95cb1f26f2 248dc3677e4de59d802fda413a105a962cb897f8e691e85ec68fadd7af37d3d9
GET /genfiles/cms/1-1258/desktop/media_asset/3235fa3ecbc01182d696aaea74f8db10.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: application/json
traceparent: 00-8c51dea46d0d367101b40a24b78f78c6-9266a2853b560b4a-01
last-modified: Mon, 09 Jun 2025 12:49:29 GMT
etag: W/"0c06a2ce7b44d920632095b7968f05e7"
content-encoding: gzip
expires: Wed, 11 Jun 2025 10:06:30 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: REVALIDATED
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/83804de8d1.js | 185.244.209.62 | 200 OK | 2.4 kB |
URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/83804de8d1.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (2401) Hash6a11f0c76b1be97a59e814bb3c8caf63 c1b58b6aec8e50953bba65a99ff56cdb7a66648e 5de12d39fb07632046ff1b636373b183a8e81556b150df38b0acc72845e45fa1
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/83804de8d1.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:19 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-04bdf50f583d573bb0efe0a71dbd2ef5-bc993a835e48e0f8-01
last-modified: Wed, 11 Jun 2025 10:23:53 GMT
etag: W/"6a11f0c76b1be97a59e814bb3c8caf63"
x-amz-meta-mtime: 1749637066.114325195
content-encoding: gzip
expires: Fri, 13 Jun 2025 02:43:19 GMT
cache-control: max-age=86400
x-time-ng: 0.013
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 66514
cache: HIT
x-cached-since: 2025-06-14T02:44:45+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/c0e02032d1.css | 185.244.209.62 | 200 OK | 11 kB |
URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/c0e02032d1.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with very long lines (11072) Hash3d3e04f603cc58802ff96240abbdc3aa e7e6a5d59c97236922354b40d288736f034a1ce3 611f7a963cd4aa278f1ba51f2401247df8c658929b76bfdce45bec08be83d7bd
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/c0e02032d1.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-446241.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:17 GMT
content-type: text/css; charset=utf-8
traceparent: 00-cacce4424562dc9f27d1dffda2e07ef0-dc46957d2f17a83e-01
last-modified: Wed, 11 Jun 2025 10:23:53 GMT
etag: W/"3d3e04f603cc58802ff96240abbdc3aa"
x-amz-meta-mtime: 1749637066.112325129
content-encoding: gzip
expires: Thu, 12 Jun 2025 16:05:05 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 18360
cache: HIT
x-cached-since: 2025-06-14T16:07:17+00:00
X-Firefox-Spdy: h2
|
|
| GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/4590ed387c55d5b5854f8dff71e61190.json | 185.244.209.62 | 200 OK | 182 B |
URL GET v3.traincdn.com/genfiles/cms/1-1258/desktop/media_asset/4590ed387c55d5b5854f8dff71e61190.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-446241.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash0a64a07e9a34e8a5b5e97e80a10888c5 82545cbc39b7dcc031dd10dea841a0b3698243d6 7201497e7e8cdf9d35bf6998e43dcde5feea535f9828ce3ee98785781016126c
GET /genfiles/cms/1-1258/desktop/media_asset/4590ed387c55d5b5854f8dff71e61190.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-446241.top/
Origin: https://1xlite-446241.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 14 Jun 2025 21:13:18 GMT
content-type: application/json
content-length: 182
traceparent: 00-e64d4982381b53032cdf0a2a3ad557db-93e3784d3b0c5cb5-01
last-modified: Thu, 27 Feb 2025 08:56:47 GMT
etag: "0a64a07e9a34e8a5b5e97e80a10888c5"
expires: Wed, 11 Jun 2025 10:06:30 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: REVALIDATED
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
0.0.0.0